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Abstract 

For a fixed rational number g {—1, 0, 1} and integers a and d we consider 
the set N g (a, d) of primes p such that the order of g modulo p is congruent 
to a(mod d). Under the Generalized Riemann Hypothesis (GRH), it can 
be shown that the set N g (a, d) has a natural density 8 g (a, d). Arithmetical 
properties of S g (a,d) are described and 5 g {a,d) is compared with S(a,d): 
the average density of elements in a field of prime characteristic having 
order congruent to a(mod d). It transpires that S g (a,d) has a strong ten- 
dency to be equal to 5(a, d), or at least to be close to it. 



1 Introduction 

Let g £ {—1,0,1} be a rational number. For a rational number u, let v p (u) 
denote the exponent of p in the canonical factorisation of u (throughout the 
letter p will be used to indicate prime numbers). If v p {g) = 0, then there exists 
a smallest positive integer k such that g k = l(mod p). We put ord p (g) = k. The 
number k is the (residual) order of g(modp). We let N g (ai, d\\ a 2 , d-z) be the 
set of primes p with u p (g) — 0, p = ai(mod d\) and ord p (g) = a 2 (mod d 2 ). By 
N g (ai, d\] d2, d2){x) we denote the number of primes p < x in N g (ai, d\\ c^)- 
For convenience N g (Q,l;a,d)(x) is denoted as N g (a,d)(x). By GRH we denote 
the Generalized Riemann Hypothesis. By (a, b) and [a, b] we denote the greatest 
common divisor, respectively lowest common multiple of a and b. 

Theorem 1 |M-2j . (GRH). The density 8 g (ai,di;a,2,d2) of the set of primes 
N g (ai, di, a,2, d 2 ) exists. Moreover, 

N g (a 1 ,d 1 ;a 2 ,d 2 ){x) = 5 g (a 1 ,d 1 ;a 2 ,d 2 )—^ h g4 



\ogx 9 ' V.log 3/2 
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Our primary interest is in 5 g (a,d) = S g (0,l;a,d), but in studying this quantity 
it turns out to be fruitful to consider N g (a\, d\\ d 2 )(x). Theorem El for ex- 
ample is obtained from Theorem 0] By K s r (with r\s) we denote the number 
field Q((s, g 1 ^), where ( s = exp(27ri/s). The density S g (ai, d\\ 02, d®) can be ex- 
pressed in terms of the degrees [K s r : Q] and certain intersection coefficients 
(with (b,f) = 1), 



Cg(b, f,v) 



1 if cr b \ Q{Cf)!lKvtV = identity; 
otherwise, 



where cr fo is the automorphism of Q(C/) that sends (f to 
Theorem 2 (GRH). We have 

(l+tu,d) = l (n,d)|a 

In the proofs of various results below the determination of the intersection coef- 
ficients c g (b,f,v) plays an important role. Obviously Q(C/) H K V)V is a subfield 
of the maximal abelian subfield, K% h v , of K VjV . It turns out, see |M-3j . that K^° v 
is of the form Q(£«, a/t) or of the form Q(£u, C2^v / ^)') f° r some integer 7 that can 
be explicitly given, where the latter case does not arise if g > 0. Of course, the 
action of a b on Q(C/) n K v>v = Q(( f ) n if*, which equals Q(C/) n Q(C, Vt) or 
Q(C/) H Q(Cti, C2^v^7)' i s eas ily determined. 

The distribution of the order over congruence classes in case d \ a seems to 
have been first studied by Chinen and Murata |CMj for d = 4. In case d\a 
the problem is much easier and unconditional results have been obtained, see 
[M-Oj IW-1[ IW-2j . In this case the density is always a rational number. Chinen 
and Murata restricted themselves to the case where g is positive and not a power 
of an integer. In their method S g (a,A) (for a is odd) is initially expressed as the 
sum of two fourfold sums. On making everything explicit, they obtained a long 
formula (distinguishing six cases) for S g (a, 4) which was subsequently simplified 
by Zagier (Zj. The author expressed S g (a, 4) as a single sum (see Theorem HJ, 
which on evaluation gives a compact formula for 5 5 (a,4) similar to Zagier's. In 
this formula an Euler product Ay appears. We put, for any Dirichlet character 

[x(p) - !]P 



a *= n i+ 



[p 2 - x(p)](p 



The constants A x turn out to be rather basic in this setting (cf. Theorem [TTJ) . A 
table of numerical values of A x , with x a Dirichlet character of modulus < 12, is 
given in |M-0j . We let Q be the set of rational integers that can not be written 
as — #0 or 9q with h > 1 an integer and go a rational number. Note that almost 
all integers g are elements of Q. 

Theorem 3 |M-lj . (GRH). Let D(g) denote the discriminant of the field Q(y/g) ■ 
Let g 6 Q. Then 5 9 (±1,4) = 1/6 unless D(g) is divisible by 8 and has no prime 
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divisor congruent to l(mod 4), in which case we have 

f| T sgn(^ Yl pl EM ^ferr D(g) * ±8; 
9 ' UTsgn(^)^ ifD(g) = ±s' 

where ip denotes the non-trivial character mod 4. 

Remark 1. We have, on invoking Theorem |pj A$ = 0.643650679662525 ■ ■ -. 
Remark 2. Let ei(n) = 1 if 8\n and otherwise. Then we can write, using e.g., 
Theorem 2 of Moree |M-0j , for 2\ a: 



S 9 (a,4) = + e iP(^))sgn(^)^^— H 



p 3 — p 2 — p — 1 

An explicit expression for S g (a,q s ) (in terms of A^s) with q a prime and g G Q 
is obtained in |M-2j . but is omitted here for reasons of space. 

Theorem El can be obtained from the following result (with s = 2): 

Theorem 4 |M-lj . (GRH). We have, for a odd and s > 1, 

Ar 9 (l,2>,4)(z) = Mli^M * +0/ ' 



logx j log 3/2 
and N g (3, 4; a, 4) (x) = #{p < a; : p = 3(mod 4), (J) = l}/2 

+ f-l)~5~-^: + 



where 



4 logx 9V log 3 /V 



wi/i /ty t/ie Dirichlet convolution of ip and the Mobius function, i.e., h^(n) = 

Remarkably, despite its arithmetic complexity 5 9 (3,4;a, 4) satisfies some easy 
properties. 

Theorem 5 |M-lj . (GRH). Write g = ±<?o> where g is positive and not an 
exact power of a rational number. 

1) If g > and h is even, then S g (2, 3; 1, 3) < S g (2, 3; 2, 3), otherwise S g (2, 3; 1, 3) > 
S g (2, 3; 2, 3). We have equality iffQ(y/g^) = Q(v / 3) and v 2 (h) e {0, 2}. The same 
result holds with 5 g (2, 3; *, 3) replaced by 5 g (*, 3). 

2) // 5 g (3, 4; 3, 4) ^ 5,(3, 4; 1, 4), tfien sgn(<5 9 (3, 4; 3, 4) - 5,(3, 4; 1, 4)) = sgn(y) . 

3) If g eG and 2 \ a, then 8 g (3, 4; a, 4) + <5_ g (3, 4; a, 4) = 1/4. 

Let <5(p; a, d) denote the density of elements in F* having order congruent to 
a(mod d). It is not so difficult to show that the average density 5(a,d) of ele- 
ments of order congruent to a(mod d) in a field of prime characteristic exists. 
I.e., we have lim^oo ^2 p<x S(p; a, d)/ir(x) = 5 (a, d), where ir(x) denotes the num- 
ber of primes p < x. The quantity 5 (a, d) can be studied by fairly elementary 
methods, but nevertheless turns out to exhibit behaviour similar to S g (a,d). An 
interpretation of S(a, d) is that it is the g-average of S g (a, d): 
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Theorem 6 [M-3j . (GRH). We have 

7r ^2 ^( a > d "> = 5 ( a > d "> + °(~7=)' 



lsl<* v 

In some sense, if one takes out the Galois theory and degree aspects of formula 
(JTJ), one obtains 6(a,d). More precisely, if one sets c g (l + ta,dt,nt) = 1 and 
[K\d >n }t,nt '■ Q] — (p{[d,n]t)nt (this is the maximal degree possible), then it can be 
shown that one obtains 8(a, d) out of S g (a, d) ( |M-Avj ) . One has 5(odd, 4) = 1/6. 
It is not difficult to prove that for most integers g with \g\ < x we have that D(g) 
has a prime divisor congruent to l(mod 4). (Indeed, the size of the exceptional 
set is bounded above by <C 9 x/yfiogx). Thus from Theorem El we infer that for 
almost all integers g with \g\ < x we have, on GRH, 8 g (odd, 4) = £(odd, 4) = 1/6. 
If S g (a,A) ^ 8(a, 4), then the difference will be small in absolute value as is 
also obvious from Theorem El It turns out that these phenomena hold true in 
general. In case d equals a prime power it is still possible to write down an 
explicit formula for the density S g (a, d) from which the latter two properties can 
be similarly inferred |M-2j . For general d this seems to be difficult. Nevertheless, 
the following two results can be proved (where k(d) = Yl P \dP * s ^he squarefree 
kernel of d): 



Theorem 7 (GRH). Letd be fixed. There are at most d (x log" lMfel(d)) x) 



integers g with \g\ < x such that 5 g (a, d) ^ 8(a, d) for some integer a. In partic- 
ular, 

(5 g (0, d),...,5 g (d- 1, d)) = (5(0, d),...,5(d-l, d)) 
for almost all integers g, where 

k (d) = f k ^ W ° dd; and k(d) = l k ^ ^ d %S ° dd; 

U ; \4k(d) otherwise, 2{ ' \ (4, d/2)k(d) otherwise. 

Theorem 8 jM3]. (GRH). Suppose that g e Q. Set D 1 = \D(g) / (D(g),d)\. 
Then 

3 . 2 ^(£>i)+2 

5 g (a,d)-5(a,d) < , 

where u(n) denotes the number of distinct prime divisors of n. 

The following basic result reduces the study of 5 g (a, d) to that of 5 g (a, /^(d)). 
Theorem 9 pVTa] . (GRH). 

1) If q is an odd prime dividing d\, then b~ g (a,qd\) = 5 g (a,d\)/q. 

2) IfS\d l7 then 5 g (a, 2di) = 5 g (a,d 1 )/2. 

That is, we have 5 g (a,d) = 5 g (a,k2(d))k 2 (d)/d. 

It is easy to see that 5(a, d) satisfies a similar and slightly stronger property: 
8(a, d) = 8(a, k(d))k(d) / d. 

In Theorem 0] it is seen that there is a difference in behaviour of ord p (g) when 
p is restricted to those primes with p = l(mod 4), respectively p = 3 (mod 4). A 
similar phenomenon (having a Galois theoretic explanation), is seen to hold in 
general. 
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Theorem 10 [M^] . (GRH). Suppose that (a,d) = (b,d) = I. 

1) If d is odd, then S g (l, k(d); a, d) = 5 g (l, k(d); b, d). 

2) If d is even, then S g (l, 2k(d); a, d) = S g (l, 2k(d); b, d). 

On the other hand, if (a, d) ^ (b, d) then it seems that rarely S g (a, d) = S g (b, d), 
cf. Theorem |3] with the first part of Theorem 0] 



2 On the computation of 5 g (a, d) 

As in Theorem El in general S g (a, d) can be expressed in terms of linear combina- 
tions of the constants A x with coefficients coming from certain cyclotomic fields: 



Theorem 11 |M-3 . (GRH). Let a and d be arbitrary natural numbers. Then 
there exists an integer di\ki(d) such that 

5 g (a,d) = ^ c x A x with c x e Q(Co x ), 

where c x can be explicitly computed, denotes the group of Dirichlet characters 
modulo d\ and o x the order of \ ^ n Gdi ■ 

The following result allows one to evaluate the constants A x easily with ten 
decimal digit precision and hence, by Theorem [TTJ the density 6 g (a,d). 

Theorem 12 |M-Avj . Let p\(= 2),p2, ...be the sequence of consecutive primes. 
Let x be any Dirichlet character and n > 31 (hence p n > 127). Then 

B x = AL(2,x)L(3, X )L(i,x)S(n)R h 



k=l 



Pk(p%-Pk ~ I) J \ Pk J \ Pk 



b = TT (i + - 1]p \ = A TT 

x 11^ + [p 2 -x(p)](p-l)j xl JV p(p-i) 

A = TT 1 1 - — - — - ] = 0.3739558136- ••, and < li^l < 1 + -— 

p V P(P-1)J " P 3 nll 

The factor AL{2, x)L(3, x)L(4, x) i n the latter result is the beginning of an ex- 
pansion of B x in terms of special values of L-series: 

Theorem 13 jM-Avj . One has 

B * = A L{% m% X ^ ft mxl mr \ withA(fc,r)eZ. 

v ' ^ ' r=l fc=3r+l 

This formula can be used to approximate B x (and thus A x ) with even higher 
numerical precision. The integers X(k,r) are related to so-called convoluted Fi- 
bonacci numbers, see |M-Fij , and exhibit certain monotonicity properties in both 
the k and r direction ( |M-Fij ). These monotonicity properties are valid in a much 
more general setting, see |M- Wij . 
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3 On similar results for the index 



The index, [(Z/pZ)* : (g(mod p))], of the subgroup generated by g(mod p) inside 
the multiplicative group of residues mod p, is denoted by r p (g) and called the 
(residual) index mod p of g. For this quantity similar questions can be asked 
with ordp(g) replaced by r p (g). The results under this replacement turn out 
to be rather similar, see |M-1[ IM-2[ IM-3[ IF] , however, they are much easier to 
establish. A reason for this is that in the latter case intersection coefficients do 
not appear. It was in this context that the constants A x were introduced by 
Pappalardi jPj. 

4 On the proofs of the results 

For reasons of space we can only give a small sample here. We sketch the proof 
of Theorem |2j 

Sketch of proof of Theorem^ On noting that r p (g)oTd p (g) = p — 1 we obtain 
that N g (a, d)(x) = J2t^i ^g( a > d] t)(x), where 

V g (a, d; t)(x) := #{p < x : r p (g) = t, p = 1 + ta(mod dt)}. 

In this infinite sum the terms with t > \f\ogx are less easily individually com- 
puted, but since they are small they can be taken together to form an error term, 
which can be estimated by 0(x\og~ 3 ^ 2 x). If (1 + ta, d) > 1, then there is at most 
one prime counted by V g (a, d; t)(x) and this prime has to divide d. In this way 
one obtains that 

N g (a,d)(x) = J2 V g (a,d;t)(x)+0(-^). (2) 

— loer'x 

t<V^ogx, (l+ta,d)=l to 

Note that V g (a, d; l)(x) counts the number of primes p = 1 + a(mod d) such that, 
moreover, g is a primitive root modulo p. This function, and indeed V g (a, d; t)(x), 
can be estimated by a variation of Hooley's classical argument [Hj. However, we 
need to carry this out with a certain uniformity in t which forces us to keep track 
of the dependence on t of the various estimates. Furthermore, as will be explained 
shortly, the additional condition p = 1 +ta(mod dt) is responsible for bringing in 
the Galois theoretic intersection coefficients c g (l + ta,dt,nt). By inclusion and 
exclusion we find that 

oo 

V g (a, d; t)(x) = /i(n)#{p < x : p = 1 + to(mod dt), nt\r g (p)}. (3) 

n=l 

The counting functions in the latter sum can be estimated by an effective form 
of Chebotarev's density theorem, cf. Theorem 3 of |M-lj and the discussion im- 
mediately following that theorem. Namely, we are interested in those primes 
p = 1 + at(mod dt) that split completely in K nt , n t '■= Q((nt, g l ^ nt ). These primes 
must have a Frobenius a in K^^nt with the property that (r\^ dt ) = ci +ta and 
o~\K nt ,nt = id- If such a a exists then certainly we must have CFi+ta\fM£ it )nK nt ,nt =l &-> 
i.e. c g (l + ta, dt, nt) = 1. Indeed, such a a turns out to exist iff c g (l +ta, dt, nt) = 
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1. On applying Chebotarev's density theorem one then finds, assuming the Rie- 
mann Hypothesis (RH) holds for the field Kid, n ]t,nt, that 

< x : p = 1 + ta(mod dt), nt\r g (p)} = c g( ^ n ^ Li(x) + 0(\/x logx). 

[K[d,n]t,nt\ 

Again there is a problem with the tail in the series in (J3J), but again it can be 
reasonably estimated and one obtains that 

V g (a, d; t)(x) = fi(n)^{p < x : p = 1 +ta(mod dt), nt\r g {p)} + E(x), 

P{n)< (log x)/6 

where P(n) denotes the greatest prime factor of n and E(x) is the estimate for 
the tail. On combining the latter two displayed estimates, one then arrives at a 
usable estimate for V g (a, d; t)(x). On combining this with (J2J), the proof of The- 
orem El is then easily completed. □ 

Working with the sharpest known unconditional version of Chebotarev's den- 
sity theorem leads to an error term which is too weak for our purposes. Actually, 
as is clear from the above sketch it is not required to assume GRH. It suffices 
to assume RH for the number fields involved in the proof. So for Theorem |21 it 
suffices to require RH for the number fields K\d, n ]t,nt with n squarefree, (n,d)\a 
and (1 + ta, d) = 1. 

5 Numerical experiments 

The problem considered here allows for numerical experiments. We give here a 
small sample of data so obtained. In the cases studied, the numerics seemed to 
agree well with the theoretical predictions. 



Table 1: Experimental and theoretical densities for d — 5 



5\a 





1 


2 


3 


4 


5(*,5) 


0.208333 


0.235421 


0.177993 


0.234003 


0.144248 


« <Lu(*,5) 


0.208347 


0.235422 


0.178007 


0.233974 


0.144250 


<Ln(*,5) 


5(0,5) 


5(1,5) 


5(2,5) 


5(3,5) 


5(4,5) 


w 5_ 5 (*,5) 


0.208348 


0.264146 


0.194858 


0.233282 


0.099365 


M*,5) 


5(0,5) 


0.264135 


0.194865 


0.233294 


0.099371 


w 5 2 (*,5) 


0.208333 


0.240673 


0.178706 


0.229270 


0.143017 


8 2 (*, 5) 


5(0,5) 


0.240681 


0.17869T 


0.229264 


0.143029 


~ 5 5 (*,5) 


0.208348 


0.232581 


0.292840 


0.054488 


0.211742 


5 5 (*,5) 


5(0,5) 


0.232585 


0.292848 


0.054493 


0.211737 



If an entry is in a row labelled ~ S g (*, 5) and in column a, then the number given 
equals N g (a,5)(x)/7i(x) rounded to 6 decimals with x = 2038074743 (and hence 
7r(x) = 10 8 ). The theoretical values are given with 6 digit precision, with a bar 
over the last digit indicating that if the number is to be rounded off, it should be 
rounded upwards. The density 5(0,5) = 5/24 (unconditional result). 
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